Skip to content
View in the app

A better way to browse. Learn more.

Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Network isolation in unRAID 6.4 and newer

Featured Replies

51 minutes ago, mikey6283 said:

Sir, Thank you for your reply. I have  a TL-SG108E switch which  unraid is connected a so I can create  VLans  on pfsense. would you be able to give me  some pointers or image of your  pfsense/ switch setup, this would be helpful.

Instructions for creating a VLAN in pfsense are here. You’ll need to configure the switch so that traffic with that tag is allowed to the unRAID and cameras. Also need to setup a docker network on unRAID using that VLAN.

 

IMO, you should probably also create rules on the pfsense to block the VLAN from WAN.

  • 5 weeks later...
  • Replies 110
  • Views 123.4k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • I do have a unifi switch and by default it trunks all vlans to all ports.  I'll take some screenshots to illustrate where i'm at   **edit** I basically nuked all the routes and started from

  • beanmeister
    beanmeister

    Installed 6.4.1 and set VLAN interface to no IP for unRAID.  Then configured docker with the appropriate network.  Everything looks good.  The UniFi docker container is in a separate VLAN and unRAID i

  • This is by design. What you should do is to not assign an IP to br0.5 interface under unRAID Network Settings, then proceed to setup the interface for docker custom network. It will then wor

Posted Images

On 3/28/2023 at 11:50 PM, wgstarks said:

Instructions for creating a VLAN in pfsense are here. You’ll need to configure the switch so that traffic with that tag is allowed to the unRAID and cameras. Also need to setup a docker network on unRAID using that VLAN.

 

IMO, you should probably also create rules on the pfsense to block the VLAN from WAN.

 Hi  I have been able to create vlan which work with the rules i have setup for my Frigate NVR and cameras, however i am struggling on how  to change the IP address from 

192.1.168.xxx.xx;5000 unraid to the Camvlan say 192.168.xxx.123. I should be able to install the cameras directly on the Camvlan. I assume that i can assign the Frigate NVR 192.168.xxx.xx :5000 to the same Camvlan. 

Any guidance would very much be appreciated.

8 minutes ago, mikey6283 said:

 Hi  I have been able to create vlan which work with the rules i have setup for my Frigate NVR and cameras, however i am struggling on how  to change the IP address from 

192.1.168.xxx.xx;5000 unraid to the Camvlan say 192.168.xxx.123. I should be able to install the cameras directly on the Camvlan. I assume that i can assign the Frigate NVR 192.168.xxx.xx :5000 to the same Camvlan. 

Any guidance would very much be appreciated.

I'm not entirely sure what you are trying to do. But unraid dont need to have an IP on that VLAN. If you dont want it to. If unraid needs to talk to CCTV VLAN, it should be done over the firewall.

As long as the switch port you are connecting the NVR to are configured on the correct vlan, and the device have the correct IP/mask. It should work. A good start is to ping the firewall and se if you get a block in the pfsense log. Then atleast you have a conection to the firewall.



 

9 hours ago, jowe said:

I'm not entirely sure what you are trying to do. But unraid dont need to have an IP on that VLAN. If you dont want it to. If unraid needs to talk to CCTV VLAN, it should be done over the firewall.

As long as the switch port you are connecting the NVR to are configured on the correct vlan, and the device have the correct IP/mask. It should work. A good start is to ping the firewall and se if you get a block in the pfsense log. Then atleast you have a conection to the firewall.



 

 Jowe

 

 Thanks for your reply, your advice was spot on , I managed to get everything setup and working . I have been struggling to understand how Pfsense and unRaid work together. I certainly have learnt't something today as a newbie. Thankyou

18 hours ago, mikey6283 said:

 Jowe

 

 Thanks for your reply, your advice was spot on , I managed to get everything setup and working . I have been struggling to understand how Pfsense and unRaid work together. I certainly have learnt't something today as a newbie. Thankyou

No problem, just glad i could help!


 

  • 2 weeks later...

Curious. @bonienl Is there a way to split off Unraid Management UI to a different VLAN than the shares/array/storage?

 

Currently I have it on a USER vlan but would love to split it off to a MGMT vlan if possible. Thanks!

  • 5 months later...

I am not sure, if things changed since this topic was started, but I have currently the issue, that trunk works only if I configure an IP for ALL of the used VLANS in unraid. in exchange for working ICMP I get an instable connection to the unraid server. 

 

Currently I configured on my DGS-1100 an LACP-Trunk with 2 ports. On the unraid server I assigned an IP to the bridge, as well to the 2 VLAN-interfaces. Maybe I am missing something, but I am not used to, that I HAVE to assign an IP to the bridge. In general the IP can be without IP (like at proxmox) and I give an IP only on the vlan(s) I really need.

 

With this Switch-Configuration a proxmox was working smooth for years and now i am struggling with such a basic topic - any ideas?

Edited by syntactic-mobilization3954

  • 8 months later...

Hi. First of all, thanks for the post. It is very easy to follow and to understand what are you doing.

 

I've followed it and I've made a little reasearch in Internet and I don't understand why is this not working for me. 

 

I've created the VLAN and assigned it manually an IP address:

Capturadepantalla2024-07-12alas19_06_20.thumb.png.94c6b9b1239d015d87638c21de5f2b56.png

 

But I've seen that the gateway doesn't appears in the docker's settings:

Capturadepantalla2024-07-12alas19_05_52.thumb.png.7a24b44959ede2578d59bd4755790e26.png

 

As you can see, in the main one it is working correctly and I've containers running, but when I change the container's VLAN I'm not able to access it. The browser says that the site is not accesible.

 

but the container is, apparently, running ok:

Capturadepantalla2024-07-12alas19_06_01.thumb.png.7399ccd4687c0204c1ac76caec7dc049.png

 

I don't understand why the gateway doesn't appear in the docker settings.

 

Thanks in advance.

 

 

 

 

 

  • 2 months later...

Followed this guide with Unraid 6.12.10, and it works like a charm!  Screenshots are still valid, too. Thanks so much.

  • JorgeB changed the title to Network isolation in unRAID 6.4 and newer
  • 6 months later...

(I haven't read the entire discussion, maybe it has already been posted here)

 

VLANs are a possible solution, but what worked for me in the end was this: https://blog.siglerdev.us/unraidos/

  • 7 months later...

I'm so desperate and I don't know what to try, adjust.

Is it possible, that the pfSense DHCP server takes over the assignment of IP addresses based on MAC address or anything else. The Unraid DHCP server assigns Containers addresses to me non-stop. Of course, everything is set to a certain VLAN and Unraid and pfSense.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.